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DDA 76-4757 


23 September 1976 


MEMORANDUM FOR: Deputy Director For Administration 


STAT FROM 
Assistant for Information, DDA 


SUBJECT >: Report of the Working Group on 
Information Systems 


1. Attached is the report of the Working Group on 
Information Systems Producing Classified Data. As you 
can see, the Group examined the feasibility of a system 
to separale classified and unclassified data in DDA infor- 
mation systems to thereby reduce the number of seemingly 
overclassified administrative documents produced by those 
systems. The conclusion could have been predicted, but I 
think it's good that we focused some attention on this area 
of the overclassification problem so that we don't appear 
to be blindly going our own way in apparent contradiction 
to the existing classification instructions. 


STAT 


“ 
participated in the group meetings and prepared this final 
paper. They did a fine job and are to be commended. 


Attachment: afs 


ce: Office of Personnel 
Office of Data Processing 
Office of Security 
Office of Finance 


STAT | O-AT/DDALX LJ (23 September 1 "* 
pistribation: 

Original -— Addressed 
VT - op w/att. 
To Ob w/att. 
1. OS w/att. 
To OF wath. 
| DOA Subjocl wath. 
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coy 
to PME. Chaco 


STAT 


STAT 
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REPORT OF THE WORKING GROUP ON 
[INFORMATTON SYSTEMS PRODUCING CLASSIFIED DATA 


BACKGROUND 

ClA produces yreat volumes of classified information, 
the majority of which is properly classified but some of 
which is technically overclassified by the definitions of 
Executive Order 11652. The Working Group was organized to 
look at the classification problem as it relates to computer- 
assisted information systems, including input documents, 
information in the data base, output reports and secondary 
documents rosulting from computer printouts. 


According to H.O. 11652, information should be classi- 
Fied in the interests of national defense or foreign rela- 
Lions (collectively called national security). The basic 
Lest for assigning classification to a document is whether 
the release of that decument would cause a degree of damage 
to national security. Additionally, documents are classi- 
Fied to protect intelligence sources and methods -- one area 
of which involves relationships with employees. 


With widespread criticism of questionable classifica- 
tion, it was felt the DDA should review classification 
practices to determine if changes in DDA personnel-oriented 
computer systems could minimize overclassification. The 
Group looked specifically at the Offices of Finance, 
Personnel and Security computer applications with the Office 
of Data Processing representing other offices' systems and 
the technology required to modify existing applications. 


PROBLEM 


pome administrative documents are overclassified when 
evaluated strictly against the classification criteria 
ostablished by B.o. 11652 and its implementing instructions. 
This is particularly apparent in ADP systems where individ- 
ual data items of varying classifications are aggregate’ into 
computerized data bases. Thus, the entire data base is 
classified at the same or next higher level than the highest 
stinygle gata item. In terms of input, individual documents 
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may require varying classifications, but because of ultimate 
information agqyregation, such decumenls are classified ini- 
tially at the level of the data base. Output documents 
create the other side of the problem. 1n some cases, indi- 
vidual reports from a classified aggregate are classified 

to protect. the ayqregqate and because classification criteria 
have not been established and defined in reporting programs. 
secondary reports or documents produced manually From com- 
puter listings are classified at the same level as the com- 
puter Listing because presently there is no way to separate 
classified from unclassified portions of the data in the 
listings. 


for example, a personnel data base contains data on 
individuals who are under various cover restrictions and 
their documentation requires different levels of classifi- 
cation. But the data base will be classified at the highest 
level to protect them all. Output on a single individual 
will be classified at the level of the aggregate data base 
although the individual may be an overt employee whose data 
requires no classification. 


SOLUTTON ALTERNATIVES : 


A. An input document would reflect the correct classi- 
fication of its individual information. his classification 
would be coded into the computer data base so that the com- 
puter could generate reports with an appropriate overall 
classification by comparing classification codes for all 
porsons or items in the report, i.e., if everyone listed is 
eoded as unclassijicd, the report would be unclassified. Or, 
if one name appeared with a classified code, the total report 
would be classified. In addition, since the classification 
codes would be indicated on computer printouts, clerks pre- 
paring secondary documents would be able to check the listing 
and classify their documents appropriately. 


such coding is technically possible but not practi- 
cal. ‘The modilicattion of all existing programs and data 
bases, the resultant systems degradations and the continuing 
maintenance costs for this coding scheme would be staggering. 
More important ty, (he problem of controlling and coordinating 
eode chanqes would create a situation susceptible to compro- 
mise if newly classified information continued to appear as 
unclassified until new computer listings were produced. This 
time laq and the possibility of an obsolete report being used 
Co control information are unacceptable risks in the protec- 
tion of Agency persennel. Since most Agency information is 
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classified to protect sources and methods and not specifi- 
cally national defense, it is questionable whether any 
measurable decrease in classification would result from 
implementation of a coding scheme. 


B. We can accept the present situation as a practical 
way to adequately protect CIA information. Without specific 
classification quidelines or a separate system to protect 
intelligence sources and methods, we must take a conservative 
approach to classification. This means that we recognize the 
probability that a small percentage of administrative docu- 
ments will] be overclassified by some interpretations of the 
Executive Order, but properly classified in order to protect 
our sources and methods. 


SUMMARY. 


At this time with existing systems and computer pro- 
grams, there is no cconomically feasible way to correct the 
problem while, at the same time, protecting Agency intelli- 
gence information. 


REC OMMENDAT TON 


The magnitude and scope of this problem are formidable 
and salutions simply are not possible overnight. However, 
every effort must be made to prevent further proliferation 
of the problem. As a step in this direction, we recommend: 


As new computer software is developed and 
new systems installed, we should ensure 
that the problem of obtaining proper 
classification is thoroughly explored and 
that all economically feasible solutions 
are implemented. From the viewpoint of 
correcting the existing situation, per- 
sonnel working with computer systems 
should he alert for practical methods 
which would correct any facet of this 
classification problem. 
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